[cobalt-users] Re:Apache Chunked Vulnerability and Cobalt servers

[Chad <chad_ny_01@xxxxxxxxx>]

Charles,

I really didn?t want to get personal, nor continue
this thread, at least not with you, but I won?t sit
back and allow you to continue making your personal
attacks on me because I simply choose to speak the
truth. I?m truly sorry if my original post (which
really was not that bitchy or rough) didn?t agree with
your idea of what can and cannot be voiced publicly,
but that?s the way it is - and I wish you my best..

<snip>
> to this list espousing that Cobalt?s are bad without
adding anything _helpful_ 
</snip>

Well Charles, over the last three years I don't ever
remember posting to this list except for on three
other occasions:

A) One of which was a question trying to determine if
the RaQ's "POP before Relay" mechanism prevented
relaying by default when disabled (it does).

B) One bitch post about how I was trying desperately
to figure out a way to get _maybe_ an extra year of
life out of little blue by reloading my RaQ3?s with
the RaQ4 OS in an attempt to update some of the
underlying core software. As sadly Cobalt has never
updated a single piece of underlying software on the
RaQ3 unit (short of security plugs) since the first
day it rolled out the door. This in contrast to the
RaQ4 units (and other models I believe) that have had
their underlying core software updated at least once
over their life span, including the RaQ?s and RaQ2?s. 


The RaQ3?s shipped with Apache 1.3.6 in late ?99 (I
think) ? and they still run Apache 1.3.6 some three
years later.  On the other hand, the RaQ4?s shipped
with Apache 1.3.6 originally as well, but were soon
upgraded to Apache 1.3.14 -then a few months later
onto 1.3.20. This would have been a fairly simple
update for Cobalt to provide to its RaQ3 user base
(and a nice treat as well), which would have come just
slightly more than a year after the units were first
released/shipped to the general public.  But like most
things, I suspect the reason this wasn?t done was
simply because of corporate greed  ?I?d also venture
to guess they thought many of us would run out and buy
new RaQ4?s units (or at least would soon) even though
we?d only had our new RaQ3?s sitting in our racks for
less than two years at that time (actually just a
little over a year).  I have no doubt many did just
that, so I guess the strategy worked in the end?<?> 
It's also why many large hosting farms which orgianlly
stocked nothing but RaQ's have moved on and expanded
to other vendors/products.. But anyway...

C) One post where I replied to helped some guy
block/drop a network ghoul via IPChains and/or his
routing tables that was hammering/attacking his
system.

So you really don't know me, nor should you pretend
to. Nor should you go around trying to play "ethics"
police here or anywhere else on the net while hiding
behind a computer screen.  I?ve been around and using
Cobalt's since late '99, and I've never needed, nor
asked for your expert advice during these last three
years, nor will I start now. 

I will however speak the truth regarding my personal
experiences (be they good or bad) regarding Cobalt or
any other vendor/product. I do not need (nor ask for)
your permission to voice my opinion here or anywhere
else regarding a relative (to some) topic for a
product many of us own.  I?m not sure about you, but
for me, that?s what makes America (and many European
nations) such a great place to live and serve. Fascism
may find a home elsewhere in this world, but it won?t
quail the voice of truth and honesty in this land.

With that said, I will definitely give credit where
credit is indeed due -which I previously regretted for
neglecting to do so in my previous post -? I do admit
that over the last 4-8 weeks it appears that SUN is
finally taking their acquisition of the Cobalt line
(and it?s customer base) a bit more seriously. Point
and case, the other security patch released just this
week for a good number of their products ? I don?t
think we would have seen that if Cobalt alone still
steered the ship.  I truly didn?t expect it, though be
it a bit long in the making. It does however show that
Cobalt/SUN is possibly trying harder to accommodate
Cobalt owners and keep their systems somewhat more
secure. Sadly (for me) the damage had already been
done many months ago, and I?ve since moved on?

So yes Charles, you can consider all three of my
previous posts (including this forth topic/post),
which have spanned the last three years, to be the
last from me. I like so many others that have
frequented this list over the last 3-4 years, have
finally moved on. My best regards Charles and good
luck to you in your future endeavors..!

Chad


__________________________________________________
Do You Yahoo!?
Yahoo! - Official partner of 2002 FIFA World Cup
http://fifaworldcup.yahoo.com